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In The Claims 
Please amend the claims as shown below: 

1 . (currently amended) A method for generating a query comprising the steps of: 

a) receiving a cookie that includes an encrypted buffer that includes a 
profile code that indicates the services that a user is entitled to use, said profile 
code encrypted using an encryption key generated using a first seed component, 
a second seed component and a third seed component, said first seed 
component further comprising user identification data, said cookie also including 
said a second seed component and said third seed component, said second 
seed component and said third seed component not encrypted; 

b) generating a request buffer that indicates a desired service; 

c) receiving said user identification data from a user; 

d) encrypting said request buffer using said second seed component as 
an encryption key so as to form an encrypted portion of a query ; and 

e) generating a query that comprises said user identification data received 
in step c) and that includes said encrypted portion of said query, said query also 
including said third seed component and said encrypted buffer, said third seed 
component and said user identification data received in step c) not encrypted. 

2. (original) A method as recited in Claim 1 further comprising the step of: 

f) transmitting said query to an authentication server. 
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3. (original) A method as recited in Claim 2 further including the steps of: 

g) receiving a response from said authentication server. 

4. (original) A method as recited in Claim 3 wherein the response received in 
step g) is encrypted using said second seed component as an encryption key. 

5. (original) A method as recited in Claim 1 wherein said user identification data 
is numerical and wherein said third seed component further comprises a 
randomly generated number. 

6. (original) A method as recited in Claim 5 wherein said encryption key is 
determined using a hash of at least three elements. 

7. (original) A method as recited in Claim 6 wherein said encryption key is 
determined by a MD-5 hash of said first seed component, said second seed 
component and said third seed component. 

8. (original) A method as recited in Claim 6 wherein said encrypted buffer is 
further encrypted using said second seed component. 
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9. (currently amended) A computer system comprising: 
a processor coupled to a bus; 

a memory unit coupled to said bus and comprising instructions that when 
executed by said processor implement a method for generating a query 
comprising the steps of: 

a) receiving a cookie that includes an encrypted buffer that includes a 
profile code that indicates the services that a user is entitled to use, said profile 
code encrypted using an encryption key generated using a first seed component, 
a second seed component and a third seed component, said first seed 
component further comprising user identification data, said cookie also including 
said a second seed component and said third seed component, said second 
seed component and said third seed component not encrypted; 

b) generating a request buffer that indicates a desired service; 

c) receiving said user identification data from a user; 

d) encrypting said request buffer using said second seed component as 
an encryption key so as to form an encrypted portion of a query ; and 

e) generating a query that comprises said user identification data received 
in step c) and that includes said encrypted portion of said query, said query also 
including said third seed component and said encrypted buffer, said third seed 
component and said user identification data received in step c) not encrypted. 
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10. (original) A computer system as recited in Claim 9 wherein said method 
further comprises the step of: 

f) transmitting said query to an authentication server. 

1 1 . (original) A computer system as recited in Claim 10 wherein said method 
further comprises the step of: 

g) receiving a response from said authentication server. 

12. (original) A computer system as recited in Claim 1 1 wherein the response 
received in step g) is encrypted using said second seed component. 

13. (original) A computer system as recited in Claim 9 wherein said user 
identification data is numerical and wherein said third seed component is a 
randomly generated number. 

14. (original) A computer system as recited in Claim 9 wherein said encryption 
key is determined using a hash of at least three elements. 

15. (original) A computer system as recited in Claim 14 wherein said encryption 
key is determined using a MD-5 hash of said first seed component, said second 
key component, and said third seed component. 
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16. (original) A computer system as recited in Claim 14 wherein said computer 
system further comprises a palmtop computer. 

17. (currently amended) A method for generating a query from a palmtop 
computer comprising: 

a) providing user identification data to a user, said user identification data 
comprising a first seed component of three seed components used for generating 
an encryption key; 

b) receiving a cookie that includes a second seed component and a third 
seed component of said three seed components used to generate said 
encryption key, said cookie also including an encrypted buffer encrypted using 
said encryption key; 

c) generating a request buffer that indicates a desired service; 

d) receiving said user identification data from a user; 

e) encrypting said request buffer using said second seed component as 
an encryption key so as to form an encrypted portion of a quory ; and 

f) generating a query that comprises said user identification data received 
in step d) and that includes said encrypted portion of said query, said query also 
including said third seed component and said encrypted buffer, said third seed 
component and said user identification data received in step d) not encrypted. 
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18. (original) A computer system as recited in Claim 17 wherein said method 
further comprises the step of: 

g) transmitting said query. 

19. (original) The method of Claim 18 further comprising the steps of: 

h) receiving a response. 

20. (original) The method of Claim 17 wherein said encryption key is determined 
using a MD-5 hash of said first seed component, said second key component, 
and said third seed component. 
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